Free · ten minutes
How ready are you for NIST CSF 2.0 alignment?
Answer nineteen questions on the requirements of NIST Cybersecurity Framework 2.0 (CSWP 29, February 2024), in four steps. Your readiness report, with your score for each area and your priority actions, is sent to your e-mail.
Standard: NIST Cybersecurity Framework 2.0 (CSWP 29, February 2024)Choose a different standard
Keep exploring
More quick readiness checks
What the NIST CSF 2.0 readiness check covers
The check measures your organisation against NIST Cybersecurity Framework 2.0 (CSWP 29, February 2024) in nineteen questions, grouped into four areas: Govern; Identify; Protect; and Detect, respond and recover. Each answer is scored and weighted; the questions marked “Double weight” are the ones independent assessors examine first.
What you get
A readiness report by e-mail: an overall score with one of four readings — Well prepared, Nearly there, Gaps to close or Starting out — a score for each of the four areas, the priority actions, a suggested order of work, the full table of your answers and the typical next step towards NIST CSF 2.0 alignment.
How to use it
Answer from evidence rather than intention: if a control exists on paper but is not operating, score it as not operating. Share the report with the people who own each area, and use the NIST CSF 2.0 hub for the requirements, the route to NIST CSF 2.0 alignment and what it costs.
Questions people ask
Is the NIST CSF 2.0 readiness check free?
Yes. It is free, takes about ten minutes and carries no obligation. Your readiness report is sent by e-mail: your score by area, the priority actions, a suggested order of work and the full table of your answers.
Is this a NIST assessment or a certificate?
No. It is a self-assessment that shows where you stand. NIST does not certify organisations against the CSF, and no “NIST certified” status exists. Whether your Target Profile is achieved is judged by your leadership, your internal audit and, if you choose, an independent assessor. Sterling's expert and experienced consultants help organisations build and evidence their Profiles; Sterling does not certify.
How is my NIST CSF 2.0 score worked out?
Each answer is scored and weighted. Questions marked “Double weight” count twice, because they are the items independent assessors examine first. The overall score gives one of four readings, Well prepared, Nearly there, Gaps to close or Starting out, and each of the four areas is scored separately.
Who should answer the questions?
Ideally the person who leads your cybersecurity programme, with the owners of each area to hand. Answer from evidence rather than intention: if a control exists on paper but is not operating, score it as not operating.
What happens after I receive my NIST CSF 2.0 readiness report?
The report shows the areas to fix first, a suggested order of work and the typical next step towards NIST CSF 2.0 alignment. If you want help with the result, a Sterling consultant can walk through it with you in a free discovery call.